materialcraft-git

LOW

maintainer alerque 0 votes scanned 2026-10-24 00:14:55.209548

View on AUR

Why flagged

The package builds from source via Git from a plausible project host (GitHub), uses SKIP for checksums (common with Git sources), and has no remote code execution, obfuscation, or untrusted binary downloads; low risk despite few votes and recent upload.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source via Git from a plausible project host (GitHub), uses SKIP for checksums (common with Git sources), and has no remote code execution, obfuscation, or untrusted binary downloads; low risk despite few votes and recent upload.

PKGBUILD

      1# Maintainer: Caleb Maclennan <caleb@alerque.com>
    
      2
    
      3_pkgname=MaterialCraft
    
      4pkgname=materialcraft-git
    
      5pkgver=0.4.0.r20.gcae0fd3
    
      6pkgrel=1
    
      7url="https://github.com/PiJellyPin/$_pkgname"
    
      8pkgdesc='vibe coded clean-room reimplementation of Adobe Substance Designer (Git HEAD)'
    
      9arch=(x86_64)
    
      10license=(MIT Apache-2.0)
    
      11depends=(glibc # libc.so libm.so
    
      12         libgcc)
    
      13makedepends=(cargo
    
      14             git)
    
      15provides=("${pkgname%-git}=$pkgver")
    
      16conflicts=("${pkgname%-git}")
    
      17source=("git+$url.git")
    
      18sha256sums=('SKIP')
    
      19
    
      20_srcenv() {
    
      21	cd "$_pkgname"
    
      22	export CARGO_HOME="$srcdir"
    
      23	if check_option debug y; then
    
      24		export CARGO_PROFILE_RELEASE_DEBUG=2
    
      25		export CARGO_PROFILE_RELEASE_STRIP=false
    
      26	fi
    
      27	if check_option lto y; then
    
      28		export CARGO_PROFILE_RELEASE_LTO=thin
    
      29		export CARGO_PROFILE_RELEASE_CODEGEN_UNITS=1
    
      30	fi
    
      31	export CARGO_PROFILE_RELEASE_OPT_LEVEL=3
    
      32	CFLAGS+=' -fno-lto'
    
      33	export CARGO_TARGET_DIR=target
    
      34	export RUSTUP_TOOLCHAIN=stable
    
      35}
    
      36
    
      37prepare() {
    
      38	_srcenv
    
      39	cargo fetch --locked --target host-tuple
    
      40}
    
      41
    
      42pkgver() {
    
      43	cd "$_pkgname"
    
      44	git describe --long --tags --abbrev=7 HEAD |
    
      45			sed 's/\([^-]*-g\)/r\1/;s/-/./g'
    
      46}
    
      47
    
      48build() {
    
      49	_srcenv
    
      50	cargo build --frozen --release --features gui
    
      51}
    
      52
    
      53package() {
    
      54	depends+=(libgcc_s.so)
    
      55	cd "$_pkgname"
    
      56	install -Dm0755 -t "$pkgdir/usr/bin/" "target/release/${pkgname%-git}"{,-gui}
    
      57	install -Dm0644 assets/logo.png "$pkgdir/usr/share/icons/hicolor/256x256/apps/${pkgname%-git}.png"
    
      58	install -Dm0644 -t "$pkgdir/usr/share/licenses/$pkgname/" LICENSE-{APACHE,MIT}
    
      59}
    
      60

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-24 00:14:55	Low	2
2026-10-23 21:38:30	Low	2